CVE-2004-0939 | BDVDB-2026-7400 Detail

Description#

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.gosecure.ca/SecInfo/gosecure-2004-10.txt
http://marc.info/?l=bugtraq&m=109709990708794&w=2
http://www.osvdb.org/8365
http://secunia.com/advisories/12752
https://exchange.xforce.ibmcloud.com/vulnerabilities/17629
http://securitytracker.com/id?1011552

Exploit#

No public exploit known

History#

Version 12004-11-19Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.